Site to Site VPN connect on initiation.

Unanswered Question
Jul 17th, 2007
User Badges:

We are setting up Site to Site VPNs over a 3g wireless network. We need for this site to sit only to connect when something is initiated from either side. Can i just set a timeout on each end? Is site to site over a 3g network possible?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jon Marshall Tue, 07/17/2007 - 09:42
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Hi


Yes set your Phase 1 and Phase 2 settings as low as you can.


Yes it should be possible over a 3G network as we run our remote access VPN's over 3G. As long as the 3G network transports IP it's possible.


HTH


Jon

sboivin Tue, 07/17/2007 - 11:11
User Badges:

So i should drop my Phase 1 and 2 down to DES/MD5?



Jon Marshall Tue, 07/17/2007 - 21:39
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Hi


Sorry no, i meant the phase 1 and phase 2 timeouts eg.


iskamp policy 10 lifetime "seconds"


crypto map vpn-set 1 set security-association lifetime "seconds"


Jon

Actions

This Discussion